Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Marketplace Contribution] Github Maltrail Feed #30052

Conversation

xsoar-bot
Copy link
Contributor

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Contributor

@asantamarina

Description

Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. hXXp://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in discovery of unknown threats (e.g. new malware).

https://github.com/stamparm/maltrail

Video Link

Short demo video of the Pack usage. Speeds up the review. Optional but recommended. Use a video sharing service such as Google Drive or YouTube.

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Community Support Level Indicates that the contribution is for Community supported pack labels Oct 4, 2023
@content-bot content-bot changed the base branch from master to contrib/xsoar-contrib_asantamarina-contrib-GithubMaltrailFeed October 4, 2023 21:54
@content-bot
Copy link
Collaborator

Thank you for your contribution. Your generosity and caring are unrivaled! Rest assured - our content wizard @MosheEichler will very shortly look over your proposed changes.
For your convenience, here is a link to the contributions SLAs document.

Copy link
Contributor

@MosheEichler MosheEichler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @asantamarina

Amazing work!!!
Please see my comments

@MosheEichler MosheEichler added the pending-contributor The PR is pending the response of its creator label Oct 11, 2023
@MosheEichler
Copy link
Contributor

@MLainer1 Can you please review?

@MosheEichler MosheEichler requested a review from MLainer1 October 12, 2023 10:49
asantamarina and others added 12 commits October 13, 2023 10:11
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
@MosheEichler
Copy link
Contributor

Hey @asantamarina
What is the status here?
Do you need some help?

asantamarina and others added 5 commits October 31, 2023 09:10
…bMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
…bMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
@MosheEichler MosheEichler merged commit 693e390 into demisto:contrib/xsoar-contrib_asantamarina-contrib-GithubMaltrailFeed Nov 5, 2023
11 of 12 checks passed
MosheEichler added a commit that referenced this pull request Nov 6, 2023
* [Marketplace Contribution] Github Maltrail Feed (#30052)

* "pack contribution initial commit"

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update GithubMaltrailFeed.yml

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.py

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Delete Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/integration-Github_Maltrail_Feed.yml

* Update pack_metadata.json

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

---------

Co-authored-by: Abel S. Santamarina <89417559+asantamarina@users.noreply.github.com>
Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* pre-commit fixes

* add README.md

* fix json

* format

* from version

* categories

* validate fixes

* remove f string

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: Abel S. Santamarina <89417559+asantamarina@users.noreply.github.com>
Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
Co-authored-by: MosheEichler <meichler@paloaltonetworks.com>
sapirshuker pushed a commit that referenced this pull request Dec 21, 2023
* [Marketplace Contribution] Github Maltrail Feed (#30052)

* "pack contribution initial commit"

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update GithubMaltrailFeed.yml

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.py

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.yml

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Update Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/GithubMaltrailFeed.py

Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* Delete Packs/GithubMaltrailFeed/Integrations/GithubMaltrailFeed/integration-Github_Maltrail_Feed.yml

* Update pack_metadata.json

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

* Update GithubMaltrailFeed.yml

* Update GithubMaltrailFeed.py

---------

Co-authored-by: Abel S. Santamarina <89417559+asantamarina@users.noreply.github.com>
Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>

* pre-commit fixes

* add README.md

* fix json

* format

* from version

* categories

* validate fixes

* remove f string

---------

Co-authored-by: xsoar-bot <67315154+xsoar-bot@users.noreply.github.com>
Co-authored-by: Abel S. Santamarina <89417559+asantamarina@users.noreply.github.com>
Co-authored-by: Moshe Eichler <78307768+MosheEichler@users.noreply.github.com>
Co-authored-by: MosheEichler <meichler@paloaltonetworks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Community Support Level Indicates that the contribution is for Community supported pack Contribution Thank you! Contributions are always welcome! External PR pending-contributor The PR is pending the response of its creator
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants